Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31372e302f32342d3332203d3e203531313637.roa
File: 352e3138322e31372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: CI29yl8yZDGc85cOzv3HFqH3QDu4lqNCkztnF7ih/lA=
Subject key identifier: 36:A6:D3:69:9C:93:D2:E5:39:D4:06:85:0F:A5:06:76:71:0D:C5:D8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7B25C68D535434EBFD72B13C7A667B31D3A43F79
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31372e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:26 +0000
ROA not before: Fri 27 Dec 2024 11:42:26 +0000
ROA not after: Fri 26 Dec 2025 11:47:26 +0000
asID: 51167
IP address blocks: 5.182.17.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:25:c6:8d:53:54:34:eb:fd:72:b1:3c:7a:66:7b:31:d3:a4:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:26 2024 GMT
Not After : Dec 26 11:47:26 2025 GMT
Subject: CN=36A6D3699C93D2E539D406850FA50676710DC5D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:79:14:24:cc:9a:70:64:17:1f:e4:fa:c9:
78:18:0c:6f:d6:9a:d3:eb:d6:98:c6:28:bb:be:f8:
a2:58:8b:38:d6:5a:6e:83:98:89:05:df:6b:ad:5d:
0d:31:7e:62:9d:22:a4:e9:9b:de:c1:4d:45:df:b3:
27:34:e1:d1:4a:ef:66:87:a5:cb:ea:58:0c:9f:3c:
a8:2f:10:1f:5f:f9:76:03:a9:f4:03:e7:76:ab:e4:
81:e4:bf:57:b2:50:20:3c:28:d7:e2:58:79:62:ec:
14:9d:5b:5d:ef:62:de:2f:a4:38:be:3e:d1:f4:ef:
91:c4:3b:58:ec:02:9b:fd:fa:a6:ec:a6:37:01:03:
0e:9a:1e:37:ce:3f:97:9c:54:1e:d4:75:1a:b8:9e:
37:9b:9d:da:3e:9a:42:26:9e:6c:b9:47:3a:9e:ad:
41:79:40:d1:ba:f7:b5:24:21:35:f5:3b:74:39:19:
12:3d:e0:ef:b7:b8:ff:ea:54:89:52:4f:08:eb:8f:
e8:fb:03:14:ad:6d:01:ef:76:a2:22:60:96:c2:cc:
98:39:21:09:a1:36:06:01:42:1e:97:ca:b5:03:98:
49:f2:52:17:f5:84:80:6f:1c:d0:4b:dd:2e:28:0c:
3a:00:c1:4b:59:e6:35:b8:d2:05:ec:51:ea:33:37:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A6:D3:69:9C:93:D2:E5:39:D4:06:85:0F:A5:06:76:71:0D:C5:D8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f8:89:17:e0:0a:12:9e:49:66:67:1c:24:42:9d:6b:db:ec:
c6:1d:ec:b3:d3:89:bc:5d:2e:18:fa:f0:59:b5:6c:8b:8b:05:
d2:30:1e:46:e1:f6:75:a8:21:a0:17:3d:fb:dd:29:43:c7:da:
6e:e9:bc:90:2e:d5:40:a5:58:92:91:33:8b:20:98:33:3d:d4:
cc:e2:8a:cb:56:1a:e5:dc:1f:34:44:df:a6:b4:bf:98:a0:e7:
b7:17:02:12:61:29:25:13:7e:fd:f6:04:7e:4e:3c:38:6b:f2:
fe:4e:fa:0f:4c:36:e0:8e:5f:24:d6:f6:0f:f3:c8:b6:ab:e0:
ec:02:8f:33:8a:5c:d0:5d:6c:50:26:8d:34:59:27:5c:98:86:
91:31:ff:a1:2e:27:7f:b7:ad:ea:1f:b0:67:ba:8a:5c:7f:f4:
cd:9c:d9:cc:71:fc:0f:87:66:64:ec:b6:bd:01:cd:24:06:55:
31:58:7b:61:db:e0:c5:53:41:0f:c6:56:fd:48:2e:8d:18:c9:
2b:85:cc:b5:c8:95:71:c7:a7:66:b7:c6:a9:7e:be:c1:cf:0d:
6d:03:f0:5a:9f:f2:46:f6:48:e5:0f:b6:41:31:0b:34:6a:a3:
f9:26:4b:7c:49:e0:1c:82:50:96:e9:df:df:b2:9f:90:6b:dd:
9f:e2:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:02:36 2025 by rpki-client